diff options
author | jeremy@chromium.org <jeremy@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98> | 2009-10-09 16:23:10 +0000 |
---|---|---|
committer | jeremy@chromium.org <jeremy@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98> | 2009-10-09 16:23:10 +0000 |
commit | 810d6408e8553435b97151805a9ed48ffe8d610e (patch) | |
tree | d62eb1b03094529dcf216d489d566ff0d71a5a39 /chrome/renderer/renderer.sb | |
parent | 20a4a446ecc18a143d396f6cb7b16414df59cef3 (diff) | |
download | chromium_src-810d6408e8553435b97151805a9ed48ffe8d610e.zip chromium_src-810d6408e8553435b97151805a9ed48ffe8d610e.tar.gz chromium_src-810d6408e8553435b97151805a9ed48ffe8d610e.tar.bz2 |
Some fixes to the OS X Sandbox:
* Added a command line option to enable verbose logging in the Sandbox. This will be useful when we start looking at the information in ChromeBot.
* Modified the code that splices the homedir path into the Sandbox file. This code is now only used on 10.6 and no longer uses a regex.
* Moved sandbox code out into a sandbox_mac file.
* Changed 10.6 seed release references -> 10.6 .
BUG=21483
TEST=Browser should launch and display NTP correctly on OS X 10.5 & 10.6
Review URL: http://codereview.chromium.org/242165
git-svn-id: svn://svn.chromium.org/chrome/trunk/src@28541 0039d316-1c4b-4281-b951-d872f2087c98
Diffstat (limited to 'chrome/renderer/renderer.sb')
-rw-r--r-- | chrome/renderer/renderer.sb | 12 |
1 files changed, 7 insertions, 5 deletions
diff --git a/chrome/renderer/renderer.sb b/chrome/renderer/renderer.sb index 42ca75d..e9f6094 100644 --- a/chrome/renderer/renderer.sb +++ b/chrome/renderer/renderer.sb @@ -5,6 +5,8 @@ ;; (version 1) (deny default) +; Support for programmatically enabling verbose debugging. +;ENABLE_LOGGING (debug deny) ; Allow sending signals to self - http://crbug.com/20370 (allow signal (target self)) @@ -14,7 +16,7 @@ ; Each line is marked with the System version that needs it. ; This profile is tested with the following system versions: -; 10.5.6, 10.6 seed release +; 10.5.6, 10.6 ; Allow following symlinks (allow file-read-metadata) ; 10.5.6 @@ -26,12 +28,12 @@ ; Needed for Fonts. (allow file-read-data (regex #"^/System/Library/Fonts")) ; 10.5.6 -(allow file-read-data (regex #"^/Library/Fonts")) ; 10.6 seed release +;10.6_ONLY (allow file-read-data (regex #"^/Library/Fonts")) ; 10.6 (allow mach-lookup (global-name "com.apple.FontObjectsServer")) ; 10.5.6 -(allow mach-lookup (global-name "com.apple.FontServer")) ; 10.6 seed release +;10.6_ONLY (allow mach-lookup (global-name "com.apple.FontServer")) ; 10.6 ; USER_HOMEDIR is substitued at runtime - http://crbug.com/11269 -(allow file-read-data (regex #"^USER_HOMEDIR/Library/Fonts")) ; 10.6 seed release +;10.6_ONLY (allow file-read-data (subpath "USER_HOMEDIR/Library/Fonts")) ; 10.6 ; Needed for IPC on 10.6 -(allow ipc-posix-shm) +;10.6_ONLY (allow ipc-posix-shm) |